Back to EveryPatent.com
United States Patent |
6,199,752
|
Bornemann
,   et al.
|
March 13, 2001
|
Postage meter machine with a chip card write/read unit and method for
operating same
Abstract
A postage meter machine with a chip card write/read unit has a controller
allows an initialization of a number of chip cards by the user in order,
in conjunction with suitably initialized chip cards, to simplify the
function input and the administration of cost center data to be handled. A
chip card number is stored in the chip card. For deriving chip cards that
set a limited function scope, a table with a specific hierarchic structure
can be produced upon employment of the keyboard and display and with the
assistance of the microprocessor and the appertaining non-volatile
memories within the postage meter machine in that the pre-stored structure
is correspondingly modified. At least one of the number of application
functions is allocated to the chip card number in the table. A tree
structure in the hierarchy thereby arises for second chip cards derived
from the first chip card and for successor cards, particularly specific
function application cards.
Inventors:
|
Bornemann; Ludger (Berlin, DE);
Guenther; Stephan (Berlin, DE);
Kopanski; Wilfried (Berlin, DE);
Zarges; Olav A. (Berlin, DE)
|
Assignee:
|
Francotyp-Postalia AG & Co. (Birkenwerder, DE)
|
Appl. No.:
|
211344 |
Filed:
|
December 15, 1998 |
Foreign Application Priority Data
| Dec 15, 1997[DE] | 197 57 648 |
Current U.S. Class: |
235/375; 705/401; 705/408 |
Intern'l Class: |
G06F 017/00 |
Field of Search: |
235/375,378,492
705/401,404,408,409,410,412,416
|
References Cited
U.S. Patent Documents
4746234 | May., 1988 | Harry | 400/120.
|
4802218 | Jan., 1989 | Wright et al. | 380/23.
|
5490077 | Feb., 1996 | Freytag | 364/464.
|
5600562 | Feb., 1997 | Guenther | 708/401.
|
5602743 | Feb., 1997 | Freytag | 235/375.
|
5606508 | Feb., 1997 | Thiel.
| |
5710706 | Jan., 1998 | Markl et al.
| |
5805711 | Sep., 1998 | Windel et al. | 380/55.
|
5852813 | Dec., 1998 | Guenther et al. | 705/408.
|
5880747 | Mar., 1999 | Bartenwerfer et al. | 347/4.
|
6045278 | Apr., 2000 | Kubatzki et al. | 400/635.
|
Foreign Patent Documents |
196 05 015 | Mar., 1997 | DE.
| |
195 34 530 | Mar., 1997 | DE.
| |
0 762 338 | Sep., 1996 | EP.
| |
0 789 333 | Jan., 1997 | EP.
| |
Other References
"Die Suche nach dem Schlussel," Schonleber, Programmieren, vol. 4 (1995),
pp. 30-33.
|
Primary Examiner: Frech; Karl D.
Assistant Examiner: Lee; Diane I.
Attorney, Agent or Firm: Schiff Hardin & Waite
Claims
We claim as our invention:
1. A postage meter machine comprising:
a printer for printing an imprint on a print-receiving medium;
a control system connected to said printer for controlling a printing
procedure resulting in printing of said imprint by said printer, said
control system including a microprocessor, a memory connected to said
microprocessor, and a user interface connected to said microprocessor;
a chip card write/read unit connected to said microprocessor;
a plurality of chip cards individually insertable into said chip card
write/read unit, including a master card containing initialization data
and a plurality of successor cards, each of said successor cards having a
chip card number and, initially, containing no function data;
said master card, upon insertion thereof in said chip card write/read unit,
allowing operation of said control system to download said initialization
data into said memory;
said user interface allowing initialization of each of said successor chip
cards as said successor chip cards are individually inserted in said chip
card write/read unit after removal of said master card, including user
modification of the chip card number of a successor chip card inserted in
said chip card write/read unit and storage of function data dependent on
said initialization data, for a limited function associated with said
printing procedure, in the successor chip card inserted in said write/read
unit, and thereby allocating said limited function to the successor chip
card inserted in the chip card write/read unit;
after initialization of the successor chip card inserted in said chip card
write/read unit, said memory storing the chip card number thereof and the
limited function allocated thereto in a list, said list, after
initialization of all of said plurality of successor chip cards resulting
in a plurality of initialized chip cards, containing the respective chip
card numbers of all of said plurality of initialized chip cards and the
limited functions respectively allocated thereto; and
after initialization of all of said plurality of successor chip cards, said
microprocessor controlling said printing procedure dependent on one of
said initialized chip cards inserted in said chip card write/read unit.
2. A postage meter machine as claimed in claim 1 wherein said
microprocessor, during initialization of each of said chip cards in said
plurality of successor chip cards, allocates respective limited functions
to said chip cards in a sequence for simplifying execution of said
printing procedure.
3. A postage meter machine as claimed in claim 1 wherein said printing
procedure includes administration of a monetary amount associated with the
printing of said imprint, and wherein one of said limited functions
allocated to one of said initialized successor chip cards comprises
charging a cost center for said monetary amount.
4. A postage meter machine as claimed in claim 1 wherein said printing
procedure comprises a plurality of functions having a hierarchical
organization, and wherein said microprocessor, during initialization of
all of said successor chip cards in said plurality of chip cards,
categorizes the respective limited functions according to said
hierarchical organization and enters said limited functions into said list
according to their respective categorizations in said hierarchical
organization, for producing a hierarchical list with said chip card
numbers entered therein according to a top down initialization dependent
on said hierarchical organization.
5. A postage meter machine as claimed in claim 4 wherein said
microprocessor produces said hierarchical list with said chip card numbers
listed therein in a sequence dependent on a position within said
hierarchical organization of the limited function allocated to the
successor chip card having a particular chip card number.
6. A postage meter machine as claimed in claim 1 wherein said control
system further includes a display, and wherein said user interface
comprises a keyboard, and wherein said postage meter machine further
comprises a housing containing said printer and said control system and
said chip card write/read unit, said housing having a guide plate for
guiding said print-receiving medium past said printer, said housing having
an upper housing edge in said chip card write/read unit having a plug-in
slot disposed behind said guide plate and accessible from said upper
housing edge for receiving, one at a time, said master chip card and said
successor chip cards.
7. A postage meter machine as claimed in claim 6 wherein said printing
procedure comprises a plurality of functions having a hierarchical
organization, and wherein said keyboard, said display and said
microprocessor in combination comprise means for manual initialization of
all of said successor chip cards in said plurality of chip cards, for
categorizing the respective limited functions according to said
hierarchical organization and entering said limited functions into a list
according to their respective categorizations in said hierarchical
organization.
8. A method for operating a postage meter machine comprising the steps of:
providing a printer for printing an imprint on a print-receiving medium;
executing a printing procedure in a control system connected to said
printer for controlling printing of said imprint by said printer, said
control system including a microprocessor, a memory connected to the
microprocessor, and a user interface connected to the microprocessor;
connecting a chip card write/read unit to said microprocessor;
providing a plurality of chip cards which are individually insertable into
said chip card write/read unit, including a master card containing
initialization data and a plurality of successor cards, each of said
successor cards having a chip card number and, initially, containing no
function data;
inserting said master card into said chip card write/read unit and
downloading said initialization data therefrom into said memory to allow
operation of said control system, and thereafter removing said master card
from said chip card write/read unit;
after removal of said master card from said chip card write/read unit,
successively inserting each of said successor chip cards individually into
said chip card write/read unit, and initializing each of said successor
chip cards using said user interface by modifying the chip card number of
a chip card inserted in said chip card write/read unit and storing
function data therein, dependent on said initialization data, and thereby
allocating a limited function, associated with said printing procedure, to
the chip card inserted in said chip card write/read unit;
after initializing a successor chip card inserted in said chip card
write/read unit, storing the chip card number thereof in said memory and
the limited function allocated thereto for producing, after initialization
of all of said plurality of successor chip cards to produce a plurality of
initialized chip cards, a list containing the respective chip card numbers
of all of said plurality of initialized chip cards and the limited
functions respectively allocated thereto; and
after initialization of all of said successor chip cards, controlling said
printing procedure via said microprocessor dependent on one of said
initialized chip cards inserted in said chip card write/read unit.
9. A method as claimed in claim 8 wherein said printing procedure includes
administering a monetary amount associated with the printing of said
imprint, and wherein the step of allocating a limited function includes
allocating a limited function to at least one of said successor chip cards
comprising charging a cost center with said monetary amount.
10. A method as claimed in claim 8 wherein the step of producing said list
comprises producing a list having said limited functions and said chip
card numbers therein in a sequence, ordered by said microprocessor, for
simplifying execution of said printing procedure.
11. A method as claimed in claim 8 wherein said printing procedure
comprises a plurality of said limited functions executed in a hierarchical
organization, and wherein the step of producing said list comprises
organizing said limited functions in said list, ordered by said
microprocessor, in a hierarchical list corresponding to said hierarchical
organization of said printing procedure with said chip card numbers in a
sequence, ordered by said microprocessor, in a top down initialization
dependent on said hierarchical organization.
12. A method as claimed in claim 11 wherein said control system includes a
display, and wherein said microprocessor produces on said display an
identifier string containing a plurality of segments dependent on said top
down initialization and wherein, during initialization of said successor
chip cards, the respective chip card numbers are entered into said
identifier string in the respective segments dependent on the
categorization of the limited function allocated to the respective chip
card numbers in said hierarchical organization.
Description
BACKGROUND OF THE INVENTION
1. Field of the Invention
The present invention is directed to a postage meter machine with a chip
card write/read unit, of the type wherein a microprocessor controls a
printing procedure dependent on a chip card which is currently inserted in
the write/read unit. The present invention is also directed to a method
for operating such a postage meter machine.
2. Description of the Prior Art
It is known to keep track of accounting-specific data about cost centers in
postage meter machines. The purpose of the cost center concept is to
introduce transparency into the accounting of devices that are used by
different users. The term "cost center" means a non-volatile memory area
provided for department-by-department accounting or booking of usage
activity. Each cost center has a number and/or name allocated to it via
which the aforementioned memory area is selected. The business entity
associated with a cost center is ultimately responsible for the cost
(charge) for postage or shipping fees incurred by personnel who use the
postage meter machine who are employed by the business entity.
Modern postage meter machines such as, for example, the thermal transfer
postage meter machine disclosed by U.S. Pat. No. 4,746,234 utilize fully
electronic digital printer devices. It is thus fundamentally possible to
print arbitrary texts and special characters in the postage stamp printing
area and to print an arbitrary advertizing slogan or one allocated to a
cost center. For example, the postage meter machine T1000 of
Francotyp-Postalia AG & Co. (Postalia, Inc. in the United States) has a
microprocessor that is surrounded by a secured housing having an opening
for the delivery of a letter. Given delivery of a letter, a mechanical
letter sensor (microswitch) communicates a print request signal to the
microprocessor. The franking imprint contains a previously entered and
stored postal information for dispatching the letter.
It is also known to store data specific to cost centers on chip cards in
order to make the user-specific information mobile (portable) and to avoid
an intentional misuse of other cost centers. U.S. Pat. No. 5,490,077
discloses a data entry with chip cards for the aforementioned thermal
transfer postage meter machine. One of the chip cards loads new data into
the postage meter machine, and a set of further chip cards allows a
setting of correspondingly stored data to be undertaken by plugging in a
chip card. Loading data and setting the postage meter machine are thus
possible in an easier and faster manner than via a keyboard input. The
keyboard of the postage meter machine remains small and surveyable because
no additional keys are required in order to load or set additional
functions. A plug-in slot of a chip card write/read unit, in which the
respective chip card is to be plugged by the customer within a time
window, is located on the back side of the postage meter machine. Due to
the lack of direct visual contact, an unpracticed user often does not
always succeed in inserting the required chip cards in immediate
succession, which then leads to unwanted delays. The plug-in slot of a
chip card write/read unit is only easily accessible when the user bends
over the machine. The problems in producing visual contact increase given
larger machines. The user often has a number of other chip cards that can
be plugged in. One chip card type (size format), for example telephone
cards, credit cards and the like, can be physically inserted into the
postage meter machine but will not be accepted. Without visual contact,
however, the error is not always immediately obvious. The postage meter
machine only works with relatively expensive chip cards that are
themselves equipped with a microprocessor (smart card) and are thus able
to check whether the postage meter machine communicates a valid data word
to the chip card before an answer is sent to the postage meter machine.
When, however, no answer or user identification ensues, this is registered
as an error in the postage meter machine and is displayed before a request
to remove the chip card is displayed in the display. To register an
erroneously inserted telephone card as attempted fraud, however, would not
be reasonable given the not unlikely occurrence of an "innocent" mistake.
German OS 196 05 015 discloses an embodiment for a printer device
(JetMail.RTM.) that, given a non-horizontal, approximately vertical letter
transport, implements a franking imprint with an ink jet print head
stationarily arranged in a recess behind a guide plate. For recognizing
the start (leading edge) of a letter, a print sensor is arranged shortly
before the recess for the ink jet print head and collaborates with an
incremental sensor. The letter transport is free of slippage due to
pressure elements arranged on the conveyor belt, and the incremental
sensor signal derived during the transport has a positive influence on the
quality of the print image. Given such a postage meter machine exhibiting
larger dimensions, however, a chip card write/read unit would have to be
arranged and operated such that sequentially pluggable chip cards can be
unproblematically used.
The chip cards are usually initialized by the chip card manufacturer and
the postage meter machine manufacturer. It is somewhat complicated,
however, for the postage meter machine manufacturer to take specific
customer wishes into consideration. There is the necessity for the user of
the postage meter machine to inform the manufacturer of his customer
wishes that relate to a specific input function by chip card. Until the
user has been sent an correspondingly initialized chip card, the postage
meter machine can continue to be set for the specific input function only
via the postage meter machine keyboard.
As an alternate way for solving the further problem that there is only
limited memory capacity available on a chip card, U.S. Pat. No. 4,802,218
discloses that a number of chip cards be simultaneously employed, these
being plugged into a number of write/read units. In addition to a user
chip card for the recrediting and debiting, whereby the postage fee value
is subtracted from the credit, a master card and a further rate chip card
with a stored postage fee table are simultaneously plugged in. By
accessing a postage fee table, a postage fee value can be determined
according to the input weight and shipping destination without loading an
entire table into the machine. Since, however, a respective write/read
unit is required for every chip card, the apparatus becomes too large and
expensive. Moreover, a separate reloading terminal is required in order to
replenish the credit in the user chip card, with the master card providing
the authorization for this reloading function. A supervisor card has
access to all master cards. Various security levels are accessible by
appertaining key codes. Such a system with a number of slots for chip
cards is very complex overall.
German OS 195 16 429 discloses a method for an access authorization to a
secured machine or circuit with card-like master elements that make
card-like authorization elements perceptible as valid. Such card-like
authorization elements that have been validated later allow access to the
secured machine or circuit without the user having the master element in
his or her possession. Further authorization elements also can be
confirmed as valid. The authorization procedure includes an information
exchange between a higher-ranking master element and a lower-ranking
authorization element or master element, and an electronic lock of the
secured machine or circuit. Specific customer wishes, however, can not be
taken into consideration because all cards generated in this way are
technologically and functionally identical and merely serve the purpose of
distributing access authorizations of a hierarchically ordered
administration of the secured machine or circuit.
SUMMARY OF THE INVENTION
An object of the present invention is to provide an easily accessible chip
card write/read unit that is arranged behind the guide plate and an
appertaining controller in the postage meter machine that avoids the
aforementioned problems which gives the user a limited possibility for
internal initialization of a derived set of chip cards. It is a further
object to provide such a chip card/postage meter machine system which is
arbitrarily expandable or, respectively, user-modifiable. A different
inserted chip card type should be recognized by the postage meter machine
and correspondingly interpreted. The postage meter machine should be
operated with an optimally inexpensive chip card type. The advantages of
unambiguous, simple and fraud-resistant cost center selection by chip card
should be available while avoiding the use of substantial memory capacity.
In addition to enabling the cost center, an enabling of predetermined,
further functions should be achieved merely by plugging a chip card into a
chip card write/read unit.
The above object is achieved in accordance with the principles of the
present invention in a postage meter machine, and in a method for
operating a postage meter machine, wherein a printer is provided for
printing an imprint on a print-receiving medium under the control of a
control system which executes a printing procedure which results in
printing of the imprint, the control system including a microprocessor
with a memory and a user interface connected l:hereto, and wherein a chip
card write/read unit is connected to the microprocessor, the postage meter
machine having a number of chip cards which are individually insertable
into the chip card write/read unit, with each of the chip cards having a
modifiable chip card number. Via the user interface, a user initializes
each of the chip cards, as they are individually inserted in the chip card
write/read unit. The initialization includes, if desired, modification of
the chip card number of the chip card inserted in the write/read unit, and
an allocation of a limited function, associated with the printing
procedure, to the chip card inserted in the write/read unit. The chip card
number and the limited function associated with that chip card are stored
in a list in a memory, so that after initialization of all of the chip
cards, the list contains all of the respective chip card numbers of all of
the chip cards, and the limited functions respectively allocated thereto.
When the postage meter machine is subsequently operated, after
initialization of all of the chip cards, the microprocessor controls the
printing procedure dependent on one of the initialized chip cards which is
currently inserted in the write/read unit.
Often, chip cards have only a very limited memory capacity. This is
especially true of inexpensive chip cards. Thus, memory cards are usually
implemented with a few hundred bits of memory size. This memory capacity
is insufficient for accepting the full scope of cost center-specific data.
The entire cost center handling within the postage meter machine is
inventively controlled by means of a consecutive number in every chip card
that is employed in combination with the postage meter machine. A first
application that allocates specific privileges (hierarchies), security
measures and cost center numbers to specific chip card numbers is stored
within the program memory of the postage meter machine. A first chip card
supplied together with the postage meter machine is referred to as a
master card. This is uniquely personalized for the postage meter machine
by the manufacturer in order to place it in operation. Further chip cards
provided together with the postage meter machine are referred to below as
successor cards. The chip card number of the successor cards is still
incomplete before their initialization. Initialization of these successor
cards can be implemented by the user with the postage meter machine.
"Initialization" means the completion of a chip card number, the writing
of a part of an identifier string in a memory of the chip card, and the
allocation and storing of the allocation of the chip card number to a
number of application functions or to at least one application function in
a non-volatile memory of the postage meter machine. A "top-down
initialization" means the derivation of chip card numbers and their
allocation in the postage meter machine to an unlimited number of
application functions or to at least one application function. For
deriving chip cards that enable a limited function scope, a table with a
specific hierarchic structure is produced using the keyboard and display,
and with the assistance of the microprocessor and the appertaining
non-volatile memory, within the postage meter machine, so as to modify the
pre-stored structure. As a result of the top-down initializing, the table
exhibits the specific hierarchic structure that is established by the
internal postage meter machine initialization with creation of an
allocation to application functions in the postage meter machine. The
table is non-volatilely stored in the non-volatile memory of the postage
meter machine. A tree structure thereby arises in the hierarchy for the
second chip card derived from the inventive first chip card and for
further successor cards, particularly specific function or function
application cards. Chip cards initialized in this way are merely plugged
in and then allow the operation of the postage meter machine for a defined
function scope.
DESCRIPTION OF THE DRAWINGS
FIG. 1a schematically illustrates the layout of the memory areas of a chip
card used in accordance with the invention.
FIG. 1b illustrates the tree structure of the hierarchy for the function
application cards derived from the master chip card in accordance with the
invention.
FIG. 2 is a block circuit diagram for setting the functions in a postage
meter machine constructed and operating in accordance with the invention.
FIG. 3 is a perspective view of the inventive postage meter machine from
behind.
FIG. 4 is a flowchart for control by the microprocessor in the data entry
procedure using a chip card in accordance with the invention.
FIG. 5 is a flowchart for control by the microprocessor in the
initialization of the second chip cards derived from the first chip card
in accordance with the invention.
DESCRIPTION OF THE PREFERRED EMBODIMENTS
FIG. 1a shows a chip card with contact field. As is known, the memory chip
is located under this field, the memory areas thereof being divided into
unprotected and protected areas. An identifier string is stored in the
protected area. The protected area has been generated in various ways. A
first part of the identifier string can only be written by the chip
manufacturer. A second part of the identifier string can only be written
by the postage meter machine manufacturer. A protected data area in the
third part of the identifier string is provided for the customer. The user
accesses this area according to a predetermined, preferably
menu-controlled input via the postage meter machine keyboard.
A hierarchic structure that--as shown in FIG. 1b--can be arbitrarily
expanded and modified by the postage meter machine user proceeding from a
first chip card, is produced for a group of chip cards by the internal
postage meter machine initialization with of an allocation to application
functions in the postage meter machine and with a user-authorized writing
(entry) in the third part of the identifier string in the memory chip of
the chip card. The first chip card 50 is at the highest hierarchy level
and is the personalized master card. The second chip cards referenced 51
in the group are at the first hierarchy level, the further chip cards
referenced 52 in the group are at the second hierarchy level, the
following chip cards referenced 53 in the group are at the third hierarchy
level, etc. The cards from these groups of chip cards for which the
function application authorization is stored level-by-level limited in
selectable fashion and tabularly are also referred to as successor cards.
The first card MC is thus the master card (hierarchy 0) with which all
initializations and modifications can be undertaken. For example, another
five cards with the consecutive numbers 002 through 006 respectively for
four of the cost centers exist in the first branch. The second card 51 is
authorized for the access to the cost centers 1 through 4 as group card GC
1-4 (hierarchy 1). The further successor cards 52 are respectively
authorized for only a single cost center as individual card EC 1, EC 3, EC
4 (hierarchy 2). The second card 51 can allow modifications in the
successor cards 52, i.e. in the individual cards EC 1, EC 3, EC 4, in the
scope of its own authorization. The modification of the cost center,
namely KST number 1, 3 and 4, that is undertaken relates to a change in
the allocation of application functions. Such a modification can be
undertaken (top down) with the assistance of the group card (51) GC 1-4
but not (bottom up) for the first card 50 MC. The franked postage value
can be booked onto one of the cost centers, namely the cost center numbers
1 through 4, with the group card (51) GC 1-4. An individual function card
FC 2 initialized internally in the postage meter machine with the group
card GC 1-4 then only allows its possessor to undertake an informational
inquiry of the bookings under the cost center number 2 and only zero-value
frankings with the postage meter machine.
Without generating a group card, it is also provided in a second branch to
generate an individual card EC 5 and a function card FC 5, both of which
are allocated to the fifth cost center. An individual function card FC 5,
initialized internally in the postage meter machine with the individual
card EC 5, only allows its possessor, for example, to undertake an
informational inquiry of the bookings under the cost center number 5 and
zero-value frankings with the postage meter machine. Without further
hierarchy levels, only a successor card FC 9 allocated to a lowest
hierarchy level can be internally initialized in the postage meter
machine. The cards of the lowest hierarchy level are the most limited in
function application scope.
Without omitting hierarchy levels, a number of successor cards allocated to
each hierarchy level can likewise be internally initialized level-by-level
in the postage meter machine in a third branch, i.e. a group card GC 6-8
as successor card 51 in the first hierarchy level, an individual card EC 8
as successor card 52 in the second hierarchy level and a function card FC
8 as successor card 53 in the third hierarchy level.
The protection of the cards against readout of the consecutive number is
possible in a known way by PIN or other security algorithms. Given loss of
the master card, a replacement is only possible from the postage meter
machine manufacturer (and corresponding documentation of the
authenticity). The inhibiting or enabling of all other cards is possible
with the master card. A further security measure in the internal postage
meter machine initialization of the system with the assistance of the
master card is achieved because only physically present cards can be
initialized; as a result, the secret, consecutive numbers of the cards are
protected. An inhibiting of the corresponding memory area of the postage
meter machine can ensue when a successor card is lost.
FIG. 2 shows a block circuit diagram for setting the function of the
postage meter machine and for driving the printer 20 with a chip card
write/read unit 70 and with a control system I of the postage meter
machine. The control means 1 forms the actual meter and includes a first
control device 90, a keyboard 88 and a display unit 89 as well as a first
and a second application-specific circuits (ASIC) 87 and 97. The first
control device 90 contains a first microprocessor 91 and known memories
92, 93, 94 as well as a clock/date circuit 95. Areas for storing
accounting data that are allocated to the cost centers are provided in the
non-volatile memory 94.
Together with a second microprocessor 85 and a non-volatile memory 84, the
first ASIC 87 forms a postal security module PSM 86. The postal security
module PSM 86 is enclosed in a physically secured housing and has a fast
serial interface to the printer control 16. A hardware-based debiting in
the first ASIC 87 ensues before every franking imprint. The debiting
ensues independently of cost centers. The second microprocessor 85
contains an integrated read-only memory int.ROM (not shown) with the
specific application program that is approved for the postage meter
machine by the postal authority, or the respective mail carrier. The
postal security module PSM 86 can be implemented as disclosed in greater
detail in European Application 789333.
Both ASICs 87 and 97 are connected via the parallel .mu.C bus to at least
the control device 90 and the display unit 89. The first microprocessor 91
preferably has terminals for the keyboard 88, a serial interface SI-1 for
the connection of the chip card write/read unit 70 and a serial interface
SI-2 for the optional connection of a modem. The credit stored in the
non-volatile memory 84 of the postal security module PSM 86 can be
increased with the modem.
The second ASIC 97 has a serial interface circuit 98 to a preceding device
13 in the mail stream, a serial interface circuit 96 to the printer device
20 and a serial interface circuit 99 to a device 18 following the printer
device 20 in the mail stream.
A suitable peripheral device embodying such interfaces is described in
German Application 197 11 997.2 (as yet unpublished), corresponding to
pending U.S. application Ser. No. 09/041,469 filed Mar. 12, 1998
("Arrangement for Communication Between Stations of a Mail Processing
Machine," Kunde et al.) assigned to the same assignee as the present
application.
The interface circuit 96 coupled with the interface circuit 14 located in
the machine base produces at least one connection to the sensors 6, 7, 17
and to the actuators, for example to the drive motor 15 for the drum 11
and to a cleaning and sealing station RDS for the ink jet print head 4, as
well as to the ink jet print head 4 of the machine base.
Further details of the interaction between the print head 4 and the
cleaning and sealing station RDS are disclosed in German Application 197
26 642.8 (not yet published, corresponding to pending U.S. application
Ser. No. 09/099,473, filed Jun. 18, 1998 ("Device for Positioning an Ink
Jet Print Head and a Cleaning and Sealing Device," von Inten et al.)
assigned to the same assignee as the present application.
One of the sensors 7, 17 arranged in the guide plate 2 is the sensor 17 and
serves the purpose of preparing the print initiation during letter
transport. The sensor 7 serves for recognizing the start of the letter for
the purpose of print initiation during letter transport. The conveyor
arrangement is composed of a conveyor belt 10 and two rollers 11, 11'. One
of the rollers is the drive roller 11, connected to the a motor 15,
another is the entrained tension roller 11'. The drive roller 11 is
preferably a toothed roller; accordingly, the conveyor belt 10 is a
toothed belt, assuring a positive force transmission. An encoder is
coupled to one of the rollers 11, 11'. The drive roller 11 together with
an incremental sensor 5 is preferably firmly seated on a shaft. The
incremental sensor 5 is implemented, for example, as a slotted disk that
interacts with a light barrier 6, forming the encoder.
The individual print elements of the print head 4 are connected within its
housing to print head electronics, and the print head can be driven for a
purely electronic printing. The print control ensues on the basis of the
path control, with the selected stamp offset being taken into
consideration, this being entered by keyboard 88 or, as needed, by a chip
card and being non-volatilely stored in the memory NVM 94. A planned
imprint thus derives from the stamp offset (without printing), the
franking imprint image and, possibly, further print images for advertising
slogan, dispatching information (selective imprints) and additional,
editable messages.
FIG. 3 shows a perspective view of the postage meter machine from behind.
The postage meter machine is equipped with a chip card write/read unit 70
that is arranged behind the guide plate 2 and is accessible from the upper
housing edge 22. After the postage meter machine is turned on with the
switch 71, a chip card 50 is plugged from top to bottom into the insertion
slot 72 and can be programmed by the user for specific applications.
Within the limits prescribed by the manufacturers, this ensues with the
user interface 88, 89 of the control system 1 of the meter. The successor
cards are configured by the user for predetermined function applications
for the respective postage meter machine. The peripheral devices of the
postage meter machine can be electrically connected to the interfaces 98
and 99 and thus can be driven by the meter according to the chip card
input. A letter 3 supplied standing on edge that has its surface to be
printed lying against the guide plate is then printed with a franking
stamp 31 according to the input data. The letter delivery opening is
laterally limited by a transparent plate 21 and the guide plate 2.
A predetermined cost center is set with the insertion of a first chip card
50 that was supplied together with the postage meter machine. For example,
the cost center 1 is pre-set, the accounting ensuing with respect thereto
in order to gain access to other cost centers when no other predetermined
inputs are actuated by keyboard.
The postage meter machine contains a corresponding application program in
its program memory 92, so that a first chip card 50 plugged into the chip
card write/read unit 70 allows a setting of the postage meter machine for
at least one function application on the highest hierarchy level.
In accordance with the invention the control system 1 has a control device
90 equipped with a microprocessor 91 with appertaining memories 92, 93,
94, 95 and a connected user interface 88, 89 that, dependent on a
predetermined input, allows the user to undertake an internal postage
meter machine initialization of at least one chip card from a number of
further chip cards 51, 52, 53 subsequently inserted into the plugin slot
72, with the microprocessor 91 of the postage meter machine being
programmed to write data into a part of the identifier string of a chip
card in order to at least supplement the chip card number. In conjunction
with suitably inserted chip cards, the function input and the calling of
the application function, for example the administration of cost center
data to be entered are simplified. The further chip cards 51, 52, 53 are
sequentially inserted into the plug-in slot 72 of the chip card write/read
unit 70 and are internally initialized in the postage meter machine, with
a table having a specific hierarchic structure being produced using the
keyboard 88 and display 89 and with the assistance of the microprocessor
91 and the appertaining non-volatile memory within the postage meter
machine. The pre-stored structure is correspondingly modified and stored
in one of the appertaining non-volatile memories 94, 95 allocated to a
respective chip card number, with the chip card number being stored in a
segment provided therefor in an identifier string stored in the protected
areas of the further chip cards 51, 52, 53. An inexpensive cost-beneficial
chip card having only a little memory capacity is referred to below as
type a. According to ISO 7816, a memory card having 256 bytes such as, for
example, OMC240SP of the Orga company can be employed.
Another chip card having significant memory capacity is referred to below
as type b. For example, an I.sup.2 CBus memory card having 32 Kbytes
according to ISO 7816, particularly AM2C256 of the AMMI company, can be
employed. This contains a chip AT24C256 of the Atmel company.
Further chip cards are referred to below as type n. For example, a chip
card with 8 Kbytes and having a microprocessor can be employed. The
further chip cards of the types b through n relate, for example, to the
following function applications:
reload possibility of the postage fee tables via chip card 49,
slogan reloading via chip cards (daily stamp),
chip cards with limited function application,
chip cards with PIN authorization of functions,
chip cards for setting peripheral device function,
chip cards for setting system configuration,
chip cards for the activation of programmed print formats.
FIG. 4 shows a flowchart for control by the microprocessor of the postage
meter machine in the data input with a chip card. After a power supply
(not shown) of the postage meter machine is turned on with the switch 71,
which is registered by the microprocessor 91 of the postage meter machine
in the step 100, a microprocessor 75 connected to a contacting arrangement
74 of the chip card write/read unit 70 signals the microprocessor 91 of
the postage meter machine when a chip card is inserted into the plug-in
slot 72, which is registered by the microprocessor 91 of the postage meter
machine in the step 101. A communication according to a predetermined
protocol between the chip card write/read unit 70 and the chip card and an
evaluation in step 102 then ensues as to determine whether the chip card
is readable as type a. When this is the case, a branch is made from the
inquiry step 103 to a step 111 in order to load a part I of the identifier
string into the non-volatile memory 94 of the postage meter machine, with
an evaluation of the company identification number (company ID) being
undertaken by the microprocessor 91 of the postage meter machine. If,
however, the chip card is not readable as type a, a branch is made from
the inquiry step 103 to a step 104 in order to undertake a communication
according to a second predetermined protocol and an evaluation in step 104
as to whether the chip card is readable as type b. When the chip card is
readable as type b, a branch is made from the inquiry step 105 to a step
106 for further data processing with the microprocessor 91 of the postage
meter machine. In a comparable way as warranted, further protocols are
executed (steps 107, not shown in detail) to determine in the inquiry step
108 whether the chip card is readable as type n, in order to then branch
to a corresponding step 109 for further data processing by the
microprocessor 91 of the postage meter machine. Otherwise, when the type
of the chip card is not recognized, a branch back to the step 101 ensues
after an error message in the step 110.
Differing from U.S. Pat. No. 5,490,077, wherein the sequence is fixed and a
chip card A for loading postage fee tables must be plugged in before a
chip card B that, for example, sets a cost center, the inventive sequence
for the sequential plugging of a series of chips cards internally
initialized in the postage meter machine is arbitrary. Additionally, the
type of chip card can be distinguished according to the inventive
flowchart according to FIG. 4. Advantageously, a suitable chip card type
corresponding to the type of application is selected.
An expensive type of chip card only has to be employed in the special
instances where there is no alternative.
There is no master card in U.S. Pat. No. 5,490,077, i.e. the chip cards are
all technologically and functionally identical. An allocation of the
five-place cost center number KST-No. to the function scope of the postage
meter machine is only possible for the manufacturer. Differing therefrom,
it is now inventively also possible for the user to store a free
allocation of three places of the five-place KST number for at least one
of the application functions internally in the postage meter machine.
A time window for the insertion of every chip card is an invariable, fixed
time period in U.S. Pat. No. 5,490,077. Inventively, however, no time
limit is now prescribed for the first insertion of the chip card.
Advantageously, a timer value is loaded into an area of the non-volatile
memories 94 or 95 of the postage meter machine in a type of application
corresponding to the identifier string of the chip cards, this timer value
being formed by a counter that defines a time window for a succeeding
action that, for example, is implemented with a successor chip card.
When a branch is made from the inquiry step 103 to a step 111 in order to
load a part I of the identifier string of the non-volatile memory 94 of
the postage meter machine, with the microprocessor 91 of the postage meter
machine undertaking an evaluation of the company identification number
(company ID), a chip card of type a is utilized with which information for
the further operation of the postage meter machine can be derived from a
stored company identifier B. As warranted, the microprocessor 91
additionally checks the company identifier B in a known way for the
presence of a valid company ID. Otherwise, an error message is output in
the optional step 113. In the step 112, the company identifier B is stored
in one of the non-volatile memory areas of the postage meter machine in
order to then branch to a step 114.
In the step 114, a part 11 of the identifier string is loaded into the
non-volatile memory 94 of the postage meter machine, with the
microprocessor 91 of the postage meter machine undertaking a masking of
the starting identifier A for the derivation of a first identifier A1 with
which a computational operation is subsequently implemented for forming a
second identifier A2, in order to subsequently check whether the first
part I stemming from the identifier string and the identifier A2 have a
predetermined relationship to one another. For forming a second identifier
A2, a computational operation having the form
A2=A1-SRN-C (1)
ensues with the serial number SRN of the postage meter machine and with a
secret constant C.
Using the company identifier B, the microprocessor 91 of the postage meter
machine is to subsequently check:
Identifier B=A2 (2)
Evaluating Equation (2), an inhibiting of the memory area in the postage
meter machine ensues for predetermined applications in the step 116 when
the predetermined relationship is lacking or--otherwise--, for example
when the company identifier (company ID) is the same as the second
identifier A2 that is formed, a branch is made to a step 117. A further
masking of the identifier can now be undertaken in order to identify the
master card.
A check to see whether a master card is present is carried out in the
inquiry step 118. When this is the case, a branch is made to a step 120 in
order to load a timer value into the non-volatile memory 94 of the postage
meter machine, whereby the microprocessor 91 of the postage meter
machine--in the step 121--enables the functionality that is provided in
the program memory 92 of the postage meter machine for the master card.
This functionality includes a generation of a specific functions
application card with the postage meter machine, which is explained in
greater detail below with reference to FIG. 5. A check is thereby carried
out in the step 122 to determine whether the card is still plugged in.
When this is the case, the functionality is enabled further. Otherwise, a
timer is started in the step 123. For example, the timer is a backward
(countdown) timer realized with memory cells in the volatile memory 93 or
in one of the non-volatile memories 94, 95 of the postage meter machine,
and the oscillator in the clock/date circuit 95 supplies a corresponding
clock signal. At the end of the timer, for example when the count value
zero is reached, an interrupt is triggered for the microprocessor 91 of
the postage meter machine. In the following step 131, further use of the
postage meter machine for at least the one functionality of franking is
then inhibited.
When a determination is made in the inquiry step 118 that no master card is
present, a branch is made to a step 119 in order to load the part III of
the identifier string into the non-volatile memory 94 or 95 of the postage
meter machine and in order to undertake an evaluation of the chip card
number stemming therefrom. A number of different application
functionalities is listed in the memory cells of a memory area of the
non-volatile memory 94 or 95 of the postage meter machine, with a
corresponding chip card number being allocated to every application
functionality. When no application is stored in the list allocated to a
specific chip card number, a branch is made from the inquiry step 125 to
the following step 131 in order to inhibit the further use of the postage
meter machine for at least the one functionality of franking. Otherwise, a
timer is started in the step 123, and the listed functionality is enabled
in the step 127 according to the chip card number. A check is carried out
in the step 128 to determine whether the card is still plugged. When this
is the case, a branch back ensues and the functionality is enabled
further. At the end of the timer, an interrupt is triggered for the
microprocessor 91 of the postage meter machine and a branch is made to the
following step 131.
The identifier string has a key-like function. The identifier string is
non-volatilely stored in the chip card distributed among a number of
security areas, so that different security demands must be met for the
modification of the part of the identifier string stored in the respective
security area. Since the manufacturer has written the first and second
parts of the identifier string, a user of the postage meter machine can
write the third part of the identifier string with a chip card number. The
microprocessor 91 is programmed to modify a chip card number stored in the
chip card and to store an allocation of the chip card number to listed
application functions in the non-volatile memory of the postage meter
machine.
The microprocessor 91 of the control device 90 is programmed--in
combination with chip cards suitably initialized for the respective
application purpose--to simplify the function input and an application
function, for example the administration of cost center data to be
registered. The function input includes the top down initialization of
further chip cards.
Inventively, the identifier string is checked in the postage meter machine
downwardly proceeding from the highest security level and opens (allows
access to) all memory areas in the non-volatile memory of the postage
meter machine specifically required in an application. A recognized gap
(absence of an entry) in the identifier string generates an error message
and results in a blocking of the appertaining memory area in the
non-volatile memory of the postage meter machine and/or the chip card.
The chip card write/read unit 70 is composed of a mechanical carrier for
the microprocessor card and a contacting arrangement 74. The latter allows
a reliable mechanical holding of the chip card in the read position and
unambiguous signaling of when the read position of the chip card in the
contacting arrangement 74 is reached, for example a tactile signal by a
pressure point according to the push/push principle, an eject key or a
display beeper message of the postage meter machine. A reliable electrical
contacting of chip cards with contacts according to ISO 7816 for at least
100,000 contacting cycles, as well as easy utilization when plugging and
pulling the chip card are thus achieved. The microprocessor card with the
microprocessor 75 has a programmed-in read capability for all types of
memory cards, as well as for chip cards with and without PIN coding. An
encryption or deciphering for security algorithms (for example, RSA, DES)
is not required. The interface to the postage meter machine is a serial
interface according to RS232 standard. The data transmission rate amounts
to a minimum of 1.2 Baud. A self-test function with ready message can be
manually implemented or can be automatically implemented after turning on
the power supply with switch 71. The master card 50 inserted into the
plug-in slot 72 grants at least an access authorization to the overall
cost center, i.e. all issued master chip cards access only this cost
center. After this, there is the possibility of selecting another cost
center by keyboard. Among other things, master chip cards are provided for
the inventive definition of the chip card/cost center relationship and for
enabling/inhibiting cards. For expanding the function scope, an access
possibility to defined cost centers via the successor cards can be created
with the postage meter machine, whereby a storage of the allocation being
possible according to an arbitrary hierarchy.
The chip cards of type a are suitable for all access/cost center handling
function applications. Each postage meter machine with chip card reader is
delivered with at least one master card. Second and further supplied cards
are referred to as successor cards. When delivered, each of these cards
has a chip card number that is not yet valid, or that is incomplete. After
their initialization internally in the postage meter machine, however,
they have a running chip card number that is an unambiguous identifier for
each chip card. The chip cards are not yet allocated to specific postage
meter machines only in their delivered condition. The new postage meter
machine to be placed in operation should preferably automatically validate
the first plugged chip card as the master card and deposit a corresponding
chip card number in its memories. The allocation of the functionality of
every existing or subsequently supplied card ensues internally in the
postage meter machine via a table. The functionality of the master card is
defined as follows:
a) The cost center KST 1 is selected as a pre-setting; this pre-set value
can be modified.
b) It is manually possible to establish, delete and select cost centers
KST.
c) It is possible to allocate successor cards to specific cost centers KST,
to modify or delete allocations.
d) All available KST linkage conditions are definable or, respectively, the
table is to be filled with input data according to a linkage.
e) Access to the full functionality of the postage meter machine. The
functionality of the successor card is defined as follows:
a) Automatic selection of a defined cost center KST or KST group with the
linkage conditions thereof (advertizing slogan No., potentially with value
limitation per time unit, etc.).
b) Set, modify or delete cost center/advertizing slogan allocations. Free
selection of all slogans present in the postage meter machine.
c) "Duplicate successor cards" function.
The security with respect to protection against card copying is assured by
manufacturer-specific and user-specific information in a write-protected
area of the card.
At the manufacturer side, the chip cards are provided with a
manufacturer-specific identifier B in the write-protected part 11 of the
identifier string. Additionally, the identifier A is stored
write-protected on the part of the postage meter machine upon initial
authorization, this identifier A being composed of the serial number of
the postage meter machine, for example 505010, and an appended, for
example three-place consecutive number, for example 001. The
personalization already arises from the serial number of the postage meter
machine and the appended, three-place number, for example 505010 001. This
personalization can ensue at the manufacturer for the master card.
In a preferred embodiment of the invention, the final personalization of
the master card itself ensues at the user by the three-place number 001
being appended with the postage meter machine. Although a distinction is
made between master card and successor cards, the difference is only that
the master card is the first card authorized by the postage meter machine
and is automatically given the number 001. Otherwise, the structure of the
card content is identical.
The postage meter machine JetMail.RTM. is able to automatically authorize
chip cards for use at the machine. This occurs proceeding from a cost
center menu sub-point provided therefor by allocating--after insertion of
the master card and selection of the authorization function--an arbitrary
successor card to an existing or newly defined cost center or group. To
this end, the corresponding successor card is plugged and is written with
an identifier A by the postage meter machine. When the chip card is used,
both identifiers (A and B) are loaded from the chip card into the postage
meter machine and are compared to one another therein after a
computational operation. Given, for example, equality, the interpretation
of the blanked-out, last three places of the identifier A ensues via a
table with respect, among other things, to which const center number this
card is allocated. The first entry in the table ensues for the master
card. The postage meter machine is blocked without an inserted master card
exhibiting said authorization function. For example, the following table
is present in the postage meter machine for the first branch according to
FIG. 1b:
Actual
KST Timer Advertizing Value remaining
Card No. No. value slogan limit value
1234567801 1-50 20 sec no R3.x = R1.x =
5000.-- 99.--
1234567802 1-4 10 sec 1 R3.y = R1.y =
2000.-- 255.--
1234567803 1 2 sec 1 R3.1 = R1.1 =
1000.-- 99.--
1234567804 3 2 sec no R3.3 = R1.3 =
1000.-- 10.--
1234567805 4 2 sec 5 R3.4 = R1.4 =
3000.-- 2005.--
1234567806 2 1 sec no R3.2 = R1.2 =
0.-- 0.--
The customer has the possibility of labeling the type a chip card with the
current cost center number. Modifications of allocations between chip
cards and cost center numbers are only possible via the master card.
Certain menu points in the cost center menu are thus only enabled with
inserted master card. Further, certain linkage conditions for the cost
centers are analogously variable, for example with respect to advertizing
slogan No., value limit per time unit. The postage meter machine reacts to
inequality or unknown, invalid cards with a corresponding error message.
As a result of the "duplicate successor cards" function, the postage meter
machine JetMail.RTM. continues to be able--with the assistance of the
master card--to independently authorize successor cards for use at it. To
that end, the corresponding successor card is inserted and written with
the identifier A by the postage meter machine. A value limit for the usage
of franking values per calendar month whose validity is limited in time
(monthly) but renewable can be defined for each cost center KST with the
assistance of the master card. The entire credit present in the postage
meter machine JetMail.RTM. is maximally available for every cost center
KST. At the beginning of a new calendar month, the predetermined value
limit is transferred; there are no carry-overs. Changes of allocations
between chip cards and cost centers as well as the potentially correlating
value limitations are possible only with the assistance of the master
card. The user interface of the postage meter machine is completely
present at all times but, given selection of the points reserved for the
master card when the master card is not inserted, this is required as
authorization. The displayable table for the administration of the chip
card functionality can, for example, contain the fields: chip card No./KST
No./timer value/advertizing slogan allocation/value limit/current
remaining value. For what are referred to as group cards, it is
fundamentally possible that groups of x cost centers are allocated to a
card number.
FIG. 5 shows a flowchart for a control by the microprocessor in the
initialization of the second chip cards or, respectively, further
successor cards derived from the first chip card that is linked into FIG.
4 corresponding to the points e, f, g, h. When the flowchart is processed
in the framework of the step 121 according to FIG. 4 and the function
"duplicate successor cards" is thereby called in the sub-step 121-1, a
corresponding screen image appears in the display 89 for the menu point:
generating an application card and an input request. The latter relates to
the input of the hierarchy level and of the desired linkage of function
applications that is to be entered by keyboard 88 in a predetermined way,
possibly menu-assisted or with user prompting. After the last input, which
is preferably terminated by an acknowledgment by enter key, a branch is
made to sub-step 121-2. A request to change cards appears in the display
89 in the sub-step 121-2. In the following sub-step 121-3, the
microprocessor 91 then checks whether the master card 50 is still
inserted. In such a case, a card change has not yet been accomplished and
a branch is made back to the sub-step 121-1 for the re-display of the
aforementioned request. After the implementation of the card change and
the check in the sub-step 121-3, the sub-step 121-4 is reached in order to
start a timer. The timer is preferably a backward timer that is preset to
a selectable value, for example 20 sec., that is started when the master
card is removed and then counts down to zero. During this time, a request
for card insertion (sub-step 121-5) appears in the display, followed by a
check in sub-step 121-6 whether a successor card (51, 52, 53) was inserted
into the chip card write/read unit 70. When this is not the case, a branch
is made back to the sub-step 121-5. Othervise, an inquiry is made in
sub-step 121-7 as to whether the timer has expired. When this is the case,
then a branch is made to the sub-step 121-10 and an error message appears
in the display 89. The application program is then aborted. When, on the
other hand, the timer has not yet expired, a branch is made to a sub-step
121-8 in order to write the predetermined data into a memory area
tabularly allocatable to a chip card number and in order to write the
edited chip card number into the successor card. The predetermined data,
including the chip card number, were correspondingly selected or,
respectively, edited according to the first step 121-1.
In case of other applications of the master card, the functionality that is
provided in the program memory 92 of the postage meter machine for the
master card is enabled by the microprocessor 91 of the postage meter
machine in the step 121. This functionality includes a generation of a
specific function application card with the postage meter machine, whereby
the generation can be hierarchically ordered, on the one hand, by editing
a part of the chip card number and, on the other hand, by the internal
tabular storing in the postage meter machine.
When the aforementioned data inscription in the sub-step 121-8 has been
successfully ended, then the completeness is determined in the sub-step
121-9 and the display of the success message appears in the display 89 in
the following sub-step 12111, with subsequent branching to menu points for
other function applications. When, however, the data inscription was
unsuccessful or incomplete, then a branch is made back to the sub-step
121-10, an error message appears in the display 89 and the application
program is then aborted.
A second version of an internal postage meter machine initialization of a
further successor card with the second chip card derives from the step 127
of FIG. 4 in combination with a correspondingly modified flowchart similar
to FIG. 5, whereby the designation 121- is replaced by the designation
127- and the flowchart is linked into FIG. 4 according to the points e',
f', g', h'.
Although modifications and changes may be suggested by those skilled in the
art, it is the intention of the inventors to embody within the patent
warranted hereon all changes and modifications as reasonably and properly
come within the scope of their contribution to the art.
Top